pf.c revision 1.3 1 1.3 thorpej /* $NetBSD: pf.c,v 1.3 1997/03/25 03:07:27 thorpej Exp $ */
2 1.3 thorpej
3 1.1 cjs /*
4 1.1 cjs * Copyright (c) 1993-95 Mats O Jansson. All rights reserved.
5 1.1 cjs * Copyright (c) 1990 The Regents of the University of California.
6 1.1 cjs * All rights reserved.
7 1.1 cjs *
8 1.1 cjs * This code is partly derived from rarpd.
9 1.1 cjs *
10 1.1 cjs * Redistribution and use in source and binary forms, with or without
11 1.1 cjs * modification, are permitted provided that the following conditions
12 1.1 cjs * are met:
13 1.1 cjs * 1. Redistributions of source code must retain the above copyright
14 1.1 cjs * notice, this list of conditions and the following disclaimer.
15 1.1 cjs * 2. Redistributions in binary form must reproduce the above copyright
16 1.1 cjs * notice, this list of conditions and the following disclaimer in the
17 1.1 cjs * documentation and/or other materials provided with the distribution.
18 1.1 cjs * 3. All advertising materials mentioning features or use of this software
19 1.1 cjs * must display the following acknowledgement:
20 1.1 cjs * This product includes software developed by Mats O Jansson.
21 1.1 cjs * 4. The name of the author may not be used to endorse or promote products
22 1.1 cjs * derived from this software without specific prior written permission.
23 1.1 cjs *
24 1.1 cjs * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
25 1.1 cjs * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
26 1.1 cjs * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
27 1.1 cjs * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
28 1.1 cjs * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
29 1.1 cjs * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
30 1.1 cjs * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
31 1.1 cjs * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 1.1 cjs * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
33 1.1 cjs * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 1.1 cjs */
35 1.1 cjs
36 1.1 cjs #ifndef LINT
37 1.3 thorpej static char rcsid[] = "$NetBSD: pf.c,v 1.3 1997/03/25 03:07:27 thorpej Exp $";
38 1.1 cjs #endif
39 1.1 cjs
40 1.1 cjs #include <stdio.h>
41 1.1 cjs #include <unistd.h>
42 1.1 cjs #include <sys/types.h>
43 1.1 cjs #include <sys/time.h>
44 1.1 cjs #include <sys/ioctl.h>
45 1.1 cjs #include <sys/file.h>
46 1.1 cjs #include <sys/socket.h>
47 1.1 cjs #include <sys/uio.h>
48 1.1 cjs #include <net/if.h>
49 1.1 cjs
50 1.1 cjs #include <net/bpf.h>
51 1.1 cjs #include <sys/errno.h>
52 1.1 cjs
53 1.1 cjs #include <netinet/in.h>
54 1.2 veego #include <netinet/if_inarp.h>
55 1.1 cjs
56 1.1 cjs #include <netdb.h>
57 1.1 cjs #include <ctype.h>
58 1.1 cjs #include <strings.h>
59 1.1 cjs
60 1.1 cjs #include <syslog.h>
61 1.1 cjs #include <varargs.h>
62 1.1 cjs
63 1.1 cjs #include "common/mopdef.h"
64 1.1 cjs
65 1.1 cjs /*
66 1.1 cjs * Variables
67 1.1 cjs */
68 1.1 cjs
69 1.1 cjs extern int errno;
70 1.1 cjs extern int promisc;
71 1.1 cjs
72 1.1 cjs /*
73 1.1 cjs * Return information to device.c how to open device.
74 1.1 cjs * In this case the driver can handle both Ethernet type II and
75 1.1 cjs * IEEE 802.3 frames (SNAP) in a single pfOpen.
76 1.1 cjs */
77 1.1 cjs
78 1.1 cjs int
79 1.1 cjs pfTrans(interface)
80 1.1 cjs char *interface;
81 1.1 cjs {
82 1.1 cjs return TRANS_ETHER+TRANS_8023+TRANS_AND;
83 1.1 cjs }
84 1.1 cjs
85 1.1 cjs /*
86 1.1 cjs * Open and initialize packet filter.
87 1.1 cjs */
88 1.1 cjs
89 1.1 cjs int
90 1.1 cjs pfInit(interface, mode, protocol, typ)
91 1.1 cjs char *interface;
92 1.1 cjs u_short protocol;
93 1.1 cjs int typ, mode;
94 1.1 cjs {
95 1.1 cjs int fd;
96 1.1 cjs int n = 0;
97 1.1 cjs char device[sizeof "/dev/bpf000"];
98 1.1 cjs struct ifreq ifr;
99 1.1 cjs u_int dlt;
100 1.1 cjs int immediate;
101 1.1 cjs
102 1.1 cjs static struct bpf_insn insns[] = {
103 1.1 cjs BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 12),
104 1.1 cjs BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 4, 0),
105 1.1 cjs BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 20),
106 1.1 cjs BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0x4711, 0, 3),
107 1.1 cjs BPF_STMT(BPF_LD | BPF_H | BPF_ABS, 14),
108 1.1 cjs BPF_JUMP(BPF_JMP | BPF_JEQ | BPF_K, 0xaaaa, 0, 1),
109 1.1 cjs BPF_STMT(BPF_RET | BPF_K, 1520),
110 1.1 cjs BPF_STMT(BPF_RET | BPF_K, 0),
111 1.1 cjs };
112 1.1 cjs static struct bpf_program filter = {
113 1.1 cjs sizeof insns / sizeof(insns[0]),
114 1.1 cjs insns
115 1.1 cjs };
116 1.1 cjs
117 1.1 cjs /* Go through all the minors and find one that isn't in use. */
118 1.1 cjs do {
119 1.1 cjs (void) sprintf(device, "/dev/bpf%d", n++);
120 1.1 cjs fd = open(device, mode);
121 1.1 cjs } while (fd < 0 && errno == EBUSY);
122 1.1 cjs
123 1.1 cjs if (fd < 0) {
124 1.1 cjs syslog(LOG_ERR,"pfInit: open bpf %m");
125 1.1 cjs return(-1);
126 1.1 cjs }
127 1.1 cjs
128 1.1 cjs /* Set immediate mode so packets are processed as they arrive. */
129 1.1 cjs immediate = 1;
130 1.1 cjs if (ioctl(fd, BIOCIMMEDIATE, &immediate) < 0) {
131 1.1 cjs syslog(LOG_ERR,"pfInit: BIOCIMMEDIATE: %m");
132 1.1 cjs return(-1);
133 1.1 cjs }
134 1.1 cjs (void) strncpy(ifr.ifr_name, interface, sizeof ifr.ifr_name);
135 1.1 cjs if (ioctl(fd, BIOCSETIF, (caddr_t) & ifr) < 0) {
136 1.1 cjs syslog(LOG_ERR,"pfInit: BIOCSETIF: %m");
137 1.1 cjs return(-1);
138 1.1 cjs }
139 1.1 cjs /* Check that the data link layer is an Ethernet; this code won't work
140 1.1 cjs * with anything else. */
141 1.1 cjs if (ioctl(fd, BIOCGDLT, (caddr_t) & dlt) < 0) {
142 1.1 cjs syslog(LOG_ERR,"pfInit: BIOCGDLT: %m");
143 1.1 cjs return(-1);
144 1.1 cjs }
145 1.1 cjs if (dlt != DLT_EN10MB) {
146 1.1 cjs syslog(LOG_ERR,"pfInit: %s is not ethernet", device);
147 1.1 cjs return(-1);
148 1.1 cjs }
149 1.1 cjs if (promisc) {
150 1.1 cjs /* Set promiscuous mode. */
151 1.1 cjs if (ioctl(fd, BIOCPROMISC, (caddr_t)0) < 0) {
152 1.1 cjs syslog(LOG_ERR,"pfInit: BIOCPROMISC: %m");
153 1.1 cjs return(-1);
154 1.1 cjs }
155 1.1 cjs }
156 1.1 cjs /* Set filter program. */
157 1.1 cjs insns[1].k = protocol;
158 1.1 cjs insns[3].k = protocol;
159 1.1 cjs
160 1.1 cjs if (ioctl(fd, BIOCSETF, (caddr_t) & filter) < 0) {
161 1.1 cjs syslog(LOG_ERR,"pfInit: BIOCSETF: %m");
162 1.1 cjs return(-1);
163 1.1 cjs }
164 1.1 cjs return(fd);
165 1.1 cjs }
166 1.1 cjs
167 1.1 cjs /*
168 1.1 cjs * Add a Multicast address to the interface
169 1.1 cjs */
170 1.1 cjs
171 1.1 cjs int
172 1.1 cjs pfAddMulti(s, interface, addr)
173 1.1 cjs int s;
174 1.1 cjs char *interface, *addr;
175 1.1 cjs {
176 1.1 cjs struct ifreq ifr;
177 1.1 cjs int fd;
178 1.1 cjs
179 1.1 cjs strcpy(ifr.ifr_name, interface);
180 1.1 cjs
181 1.1 cjs ifr.ifr_addr.sa_family = AF_UNSPEC;
182 1.1 cjs bcopy(addr, ifr.ifr_addr.sa_data, 6);
183 1.1 cjs
184 1.1 cjs /*
185 1.1 cjs * open a socket, temporarily, to use for SIOC* ioctls
186 1.1 cjs *
187 1.1 cjs */
188 1.1 cjs if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
189 1.1 cjs syslog(LOG_ERR, "pfAddMulti: socket: %m");
190 1.1 cjs return(-1);
191 1.1 cjs }
192 1.1 cjs if (ioctl(fd, SIOCADDMULTI, (caddr_t)&ifr) < 0) {
193 1.1 cjs syslog(LOG_ERR, "pfAddMulti: SIOCADDMULTI: %m");
194 1.1 cjs close(fd);
195 1.1 cjs return(-1);
196 1.1 cjs }
197 1.1 cjs close(fd);
198 1.1 cjs
199 1.1 cjs return(0);
200 1.1 cjs }
201 1.1 cjs
202 1.1 cjs /*
203 1.1 cjs * Delete a Multicast address from the interface
204 1.1 cjs */
205 1.1 cjs
206 1.1 cjs int
207 1.1 cjs pfDelMulti(s, interface, addr)
208 1.1 cjs int s;
209 1.1 cjs char *interface, *addr;
210 1.1 cjs {
211 1.1 cjs struct ifreq ifr;
212 1.1 cjs int fd;
213 1.1 cjs
214 1.1 cjs strcpy(ifr.ifr_name, interface);
215 1.1 cjs
216 1.1 cjs ifr.ifr_addr.sa_family = AF_UNSPEC;
217 1.1 cjs bcopy(addr, ifr.ifr_addr.sa_data, 6);
218 1.1 cjs
219 1.1 cjs /*
220 1.1 cjs * open a socket, temporarily, to use for SIOC* ioctls
221 1.1 cjs *
222 1.1 cjs */
223 1.1 cjs if ((fd = socket(AF_INET, SOCK_DGRAM, 0)) < 0) {
224 1.1 cjs syslog(LOG_ERR, "pfDelMulti: socket: %m");
225 1.1 cjs return(-1);
226 1.1 cjs }
227 1.1 cjs if (ioctl(fd, SIOCDELMULTI, (caddr_t)&ifr) < 0) {
228 1.1 cjs syslog(LOG_ERR, "pfAddMulti: SIOCDELMULTI: %m");
229 1.1 cjs close(fd);
230 1.1 cjs return(-1);
231 1.1 cjs }
232 1.1 cjs close(fd);
233 1.1 cjs
234 1.1 cjs return(0);
235 1.1 cjs }
236 1.1 cjs
237 1.1 cjs /*
238 1.1 cjs * read a packet
239 1.1 cjs */
240 1.1 cjs
241 1.1 cjs int
242 1.1 cjs pfRead(fd, buf, len)
243 1.1 cjs int fd, len;
244 1.1 cjs u_char *buf;
245 1.1 cjs {
246 1.1 cjs return(read(fd, buf, len));
247 1.1 cjs }
248 1.1 cjs
249 1.1 cjs /*
250 1.1 cjs * write a packet
251 1.1 cjs */
252 1.1 cjs
253 1.1 cjs int
254 1.1 cjs pfWrite(fd, buf, len, trans)
255 1.1 cjs int fd, len, trans;
256 1.1 cjs u_char *buf;
257 1.1 cjs {
258 1.1 cjs
259 1.1 cjs struct iovec iov[2];
260 1.1 cjs
261 1.1 cjs switch (trans) {
262 1.1 cjs case TRANS_8023:
263 1.1 cjs iov[0].iov_base = (caddr_t)buf;
264 1.1 cjs iov[0].iov_len = 22;
265 1.1 cjs iov[1].iov_base = (caddr_t)buf+22;
266 1.1 cjs iov[1].iov_len = len-22;
267 1.1 cjs break;
268 1.1 cjs default:
269 1.1 cjs iov[0].iov_base = (caddr_t)buf;
270 1.1 cjs iov[0].iov_len = 14;
271 1.1 cjs iov[1].iov_base = (caddr_t)buf+14;
272 1.1 cjs iov[1].iov_len = len-14;
273 1.1 cjs break;
274 1.1 cjs }
275 1.1 cjs
276 1.1 cjs if (writev(fd, iov, 2) == len)
277 1.1 cjs return(len);
278 1.1 cjs
279 1.1 cjs return(-1);
280 1.1 cjs }
281 1.1 cjs
282